Behavioral task
behavioral1
Sample
fa4bfc38d2e6aa8a12d8d92e30977dafe1af080a5329efab36e7bccbb0ea1f68.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fa4bfc38d2e6aa8a12d8d92e30977dafe1af080a5329efab36e7bccbb0ea1f68.exe
Resource
win10v2004-20220812-en
General
-
Target
fa4bfc38d2e6aa8a12d8d92e30977dafe1af080a5329efab36e7bccbb0ea1f68
-
Size
484KB
-
MD5
0a1c799c467df419be65be8b2a244800
-
SHA1
8d9db62582a46da6443923c016d1d9e9c902c763
-
SHA256
fa4bfc38d2e6aa8a12d8d92e30977dafe1af080a5329efab36e7bccbb0ea1f68
-
SHA512
3d1b53e31a35601f25cb140f1c1717b02425a03ca13a45b7e8a1fd9bd2bf1384669ffb95849e44950e7d00a0b940a86afdbd4eb824e1225458d9145508a29b11
-
SSDEEP
3072:mxjMQVacnG3icUkYdT45/NEGI/Lc+EINkzT1diLUEuBfYcORMtaoK8OL8wiWAoEI:mxjlVJnQiGP/evc2gT1Wco
Malware Config
Signatures
Files
-
fa4bfc38d2e6aa8a12d8d92e30977dafe1af080a5329efab36e7bccbb0ea1f68.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 155KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 412KB - Virtual size: 409KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rodata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ